#1Tools for creating fake identities, spoofing communications, and impersonating targets for social engineering.
Kitploit recommended
cappricio-securities/socialengineeringSEt framework
mondaycom/hatchaCAPTCHA proves you're human. HATCHA proves you're not.
otterhacker/m365pwnedTwo WinForms GUI tools for enumerating, searching, and exfiltrating data from M365 environments using application-level OAuth tokens
cappricio-securities/camjackingCamJacking is a tool designed for use in human penetration testing tool. It is intended to simulate potential security threats by testing the…
qeeqbox/social-analyzerAPI, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
spyboy-productions/r4venTrack the GPS location of the user's smartphone or PC and capture a picture of the target, along with IP and device information.
ignitetch/advphishingThis is Advance Phishing Tool ! OTP PHISHING
hackinglz/ip-obfuscationGenerates obfuscated IP addresses and URLs using DWORD, octal, hex, IPv6-mapped, and fake-domain @ tricks for penetration testing, phishing…
breakfix/sharpscomA C# utility for interacting with SCOM
magisterquis/lutlolLiving Under the Land on Linux ~ Bsides Belfast/Vienna 2025
paulpierre/informerA Telegram Mass Surveillance Bot in Python
zblurx/impersonate-rsRusty Impersonate
android1500/androidfakerAndroid Faker a Simple Xposed Module Which Spoof Your Device IDs Values. Supporting Android 8.1+
millad7/sogo_web_mail-vulnerability-cve-2025-50340Insecure Direct Object Reference (IDOR vulnerability) in SOGo Webmail Allows a user to send emails on behalf of another user.
thespeedx/tbombThis is a SMS And Call Bomber For Linux And Termux
venomous/cloudscraperA Python module to bypass Cloudflare's anti-bot page.
syss-research/clone-certSimple shell script to "clone" X.509 certificates
rasta-mouse/spawnwithCobalt Strike BOF that spawns a process using another user's token and injects Beacon shellcode, enabling post-exploitation and lateral movement via…
